kpot | 82bc94ff3650daaebad9e3e48acd34b0_NeikiAnalytics[.]exe

General

Target

82bc94ff3650daaebad9e3e48acd34b0_NeikiAnalytics.exe
Size

2.3MB
MD5

82bc94ff3650daaebad9e3e48acd34b0
SHA1

d0578134238bc5c5ac233c9e0c077c99ca2215c0
SHA256

f5fe61113c67cb279549e65edbc442fd9c238f6156a45b958d38a3d770e94241
SHA512

7aa736736d4d1204984a3b3502a738317ca0144db7183b2d0c5de40d035eec424e9bae1d3eb42ef5ff03d3fd6300e4e4643b06312e2ef533d6f91dc3c3e49ece
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6SNvFMs+T:BemTLkNdfE0pZrwT

Score

10^/10

miner upx kpot xmrig

KPOT Core Executable 1 IoCs

Processes:

resource yara_rule

sample family_kpot
Kpot family
kpot
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample xmrig
Xmrig family
xmrig
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_kpot

resource	yara_rule
sample	xmrig

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
82bc94ff3650daaebad9e3e48acd34b0_NeikiAnalytics.exe